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1. Introduction 

The well-known Cauchy-Davenport theorem states that for any pair of sets A, B in Z p 
such that A + B ^ 7, p , we have \A + B\ > \A\ + \B\ — 1 and this estimation is sharp; for 
arithmetic progressions A, B with common difference yield \A + B\ = \A\ + \B\ — 1. Now a 
natural question arises; what can we say on the image of a two variables (or more generally 
multivariable) polynomial. One can ask which polynomial / blows up its domain, i.e. if 
for any A, B C Z p , \A\ x \B\ then f(A,B) := {f(a, b) : a G A; b G B} is ampler (in some 
uniform meaning) than \A\. As we remarked earlier, the polynomial f(x,y) = x + y is not 
admissible. 

Let us say that a polynomial f(x,y) is an expander if \f(A, B)\/\A\ tends to infinity as p 
tends to infinity (a more precise definition will be given above). 

According to the literature, very few is known about existence and construction of ex- 
panders; the only known explicit construction is due to J. Bourgain (see [3]) who proved 
that the polynomial f(x,y) = x 2 + xy is an expander. More precisely he proved that if 
p £ < \A\ x \B\ < p 1 ^ 6 then \f(A, B)\/\A\ > p 7 , where 7 = 7(e) is a positive but inexplicit 
real number. 

Our aim is to extend of the class of known expanders and to give some effective estimations 
for I f(A, B)\/\A\. In particular in section [3] we will exhibit an infinite family of two variables 
polynomials being expanders. The main tool is some incidence inequality that will be also 
used to construct explicit extractors with three variables. A function / : Z 3 — > {—1,1} is 
said to be a 3-source extractor if under a certain condition on the size of A, B, C, the sum 
Z/(o b c )eAxBxc Z( a ' c ) is small compared to the number of its terms (see section \5\ for a 
sharp definition and the details). 

Finally in the last section we show that extractors are connected with some additive 
questions. 



2. Incidence inequalities for points and hyperplanes 

For any prime number p, we denote by ¥ p the fields with p elements. The main tool used 
by Bourgain in [IJ for exhibiting expanding maps and extractors is the following Szemeredi- 
Trotter type inequality: 

Proposition 1 (Bourgain-Katz-Tao Theorem). Let V and C be respectively a set of points 
and a set of lines in F 2 such that 

\V\,\C\ </ 

for some (3, < < 2. Then 

\{(P,L) EVx £ : P G L}| « p ^n-i)P ( as p tends to m fi mty ), 
for some 7 > depending only on (5. 
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In this statement, 7 can be calculated in terms of f3 from the proof, but it would imply a 
cumbersome formula. We will need the following consequence: 

Lemma 2. Let V and C be respectively a set of points and a set of lines in F 2 such that 
\C\ < p 13 for some (3, < /3 < 2. Then 

(1) |{(P,I)GPx£ : |p|3/2- 7 ' + p (3/2- 7 ')£ ( as p tends to in fi mty ) i 

for some 7' > depending only on (3. 

Proof. We denote by N(V,C) the left-hand side of (□). 
We may freely assume that in Proposition [Q, 

(2) 7 = m < ^=p. 

If \V\ < p 2- ^ - ^)/ 3 , then the result follows plainly from Proposition [1] with 

7' = min(7(/3),7(2-(2-/3)/3)). 

Otherwise, we use the obvious bound N(V, C) < \C\p < p 1+lS from which we deduce 

N(V,£) < p( 2 -C 2 -^/ 3 )( 3 / 2_ T) < |p| 3 / 2 ~T 

by (TJ. Thus CQ) holds with 7' = 7. □ 

In [9], the author established a generalization of Proposition [TJ by obtaining an incidence 
inequality for points an hyperplanes in Fp\ It can be read as follows: 

Proposition 3 (L.A. Vinh [9j). Let d > 2. Let V be a set of points in F^ and % be a set of 

hyperplanes in ¥ p . Then 

\{(P,H)eVxH : PeH}\ < ^^ + (l + o(l))j9 (d - 1)/2 (|P||-H|) 1/2 . 

p 

From this, L.A. Vinh deduced in [9] that in Proposition [H 7 can be taken equal to 

min{/3-l,2-ff} w } lenever 1 < /5 < 2. 

3. A family of expanding maps of two variables 

For any prime number p, let F p : F^ — > ¥ p be an arbitrary function in k variables in ¥ p . 
One says that the family of maps F := (F p ) p , where p runs over the prime numbers, is an 
expander (in k variables) if for any a, < a < 1, there exist e = e(a) > such that for any 
positive real numbers L\ < L 2 , and a positive constant c = c(F, Li,L 2 ) > not depending 
on a such that for any prime p and for any fc-tuples (^4j)i<j<fc of subsets of ¥ p satisfying 
L\p a < \Ai\ < Lip a (1 < i < k), one has |C P | > cp a+€ where 

C p = F P (A 1 , A 2 , . . . , A k ) := {F p (a 1 , a 2 , . . . , a k ) ■ (di, o 2 ,...,o fe )e J 4 1 x4 2 x--x v4 fc }. 

If the maps F p , p prime, are induced by some function F : Z fc — > Z, i.e. for any prime 
number p, we have 

Fp(7T p (xi), . . . , 7!- p (x k )) = 7T p (F(x 1 , X k )), 

where n p is the canonical morphism from Z onto F p , then we simply denote F p by F. If such 
(F p ) p is an expander, then we will say that F induces or is an expander. 

For example, any integral polynomial function F induces functions F p accordingly denoted 
by F. We will mainly concentrate our attention on the construction of expanders of this 
type. 

In [I], the author proved that F(x,y) = x 2 + xy induces an expander and observed that 
more general maps with two variables can be considered. It is almost clear (see remark 1 in 
section[6]) that no map of the kind f(x)+g(y)+coi f(x)g(y)+c (where c is a constant) can be 
an expander. From this, one deduces that maps of the type Fix, y) = fix) + infix) +v)q(y) 



EXPLICIT CONSTRUCTIONS OF EXTRACTORS AND EXPANDERS 



3 



where u,v e¥ p and /, g are integral polynomials, are not expanders. It is clear if u = 0, since 
in this case F(x, y) = f(x) + vg(y). If u ^ 0, then F(x, y) = (f(x) + vu~ 1 )(l + ug(y)) —vu^ 1 . 
In order to exhibit expanders of the type f(x) + h(x)g(y), we thus have to assume that / 
and g are affmely independent, namely there is no (u, v) G Z 2 such that f(x) = uh(x) + v 
or h(x) = uf(x) + v. 

We will show the following: 

Theorem 4. Let k > 1 be an integer and f, g be polynomials with integer coefficients, and 
define for any prime number p, the map F from Z 2 onto Z by 

F(x,y) = f{x)+x k g{y) 

Assume moreover that f(x) is affinely independent to x k . Then F induces an expander. 

For p sufficiently large, the image g(B) of any subset B of ¥ p has cardinality at least 
\B\/ deg(g). It follows that we can restrict our attention to maps of the type F(x,y) = 
f(x) + x k y. We let d := deg(/). 

Let A and B be subsets of F p with cardinality \A\ x \B\ x p a . For any z G F p , we denote 
by r(z) the number of couples (x,y) G Ax B such that z = F(x,y), and by C the set of 
those z for which r(z) > 0. By Cauchy-Schwarz inequality, we get 



\A\*\B\*=(Y,r(z)y <\C\x(Y,r(zf 



z<=¥ p 

One now deal with the sum Ylz& r i z ) 2 which can be rewritten as the number of quadruples 
(xi, x 2 , yi, y 2 ) G A 2 x B 2 such that 

(3) f(xi)+x$y 1 = f(x 2 ) + xZy 2 . 

For fixed (xi,x 2 ) G A 2 with x% ^ or x 2 ^ 0, ([3]) can be viewed as the equation of a line 
@xi,x2 whose points (yi,y 2 ) are in F 2 . For (xx,x 2 ) and (a, b) in A 2 , the lines £ xljX2 and t a j, 
coincide if and only if 

(xib) k = (ax 2 ) k 
b k (f(x 2 )-f(x 1 ))=x k (f(b)-f(a)), 

(xib) k = (ax 2 ) k 
(b k - a k )(f(x 2 ) - f( Xl )) = (x k - x\){f{b) - f{a)). 



or equivalent ly 

(4) 



At this point observe that by our assumption, there are only finitely many prime numbers p 
such that f(x) = ux k + v for some (u, v) G F 2 , in which case the second equation in (j3J) holds 
trivially for any x\ and x 2 . We assume in the sequel that p is not such a prime number. 

Let (a, b) G A 2 such that a ^ or b ^ 0. Assume for instance that 6^0. By (j4j) we get 
%i — for some fc-th root modulo p of unity (. Moreover, we obtain 

(5) b k (f(x 2 ) - f(C°f)) - x k (f(b) - f(a)) = 0, 

which is a polynomial equation in x 2 . If we write f(x) = J2o<j<d fj^ then 

b k (f(x)-f(c^))= ^"n ^ )./>'-' 

Kn<d 
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is a polynomial which could be identically equal to x k (f(b) — /(a)) only if the following two 
conditions are satisfied: 

f(b) - f(a) = (b k - a k )f k , 

./• / > V = cv. 

Since f(x) is assumed to be affinely independent to x k , we necessarily have fj ^ for some 
< j 7^ k. If W ' — (iai for ( being a k-th root of unity in F p , then b = r]a where 77 is some 
(kd\)-ioot of unity in ¥ p . Let 

X := {(a,b) e A 2 : b M ^ a kdl }. 
Since there are kd\ many (fc<i!)-roots of unity in F p , We have \A 2 \ X\ < kd\\A\, hence 

\A\ 2 

\X\ > for p large enough. 

If (a, b) G X, then ([5]) has at most max(fc, d) many solutions X2, thus (jl]) has at most 
kmax(k, d) many solutions (xi, X2). We conclude that the number of distinct lines when 
(a, b) runs in A 2 is c(k, f)\A\ 2 where c(k, f) can be chosen equal to (2fcmax(fc, d))' 1 , for p 
large enough. The set of all these pairwise distinct lines £ a ^ is denoted by £, its cardinality 
satisfies \A\ 2 < \C\ < \A\ 2 , as observed before. Let V = B 2 . Then putting := \A\ 2 x \B\ 2 , 
we have by Proposition [T] 

for some 5 > 0. Hence the number of solutions of the system (j3J) is 0(N 3 ^ 2 ~ S ) = 0{\ A\ 2 \B\ 1 ~ 2S ) 
Finally |C| 3> 1+2(5 , which is the desired conclusion. 

4. Further results on expanders 

When a > 1/2, instead of Bourgain-Katz-Tao's incidence inequality, we can use Proposi- 
tion [3] By the remark following Proposition [3X we can replace in the very end of our proof 
of Theorem HI 5 by min{2o; — 1; 2 — 2a}. It gives 

Proposition 5. Let F as in Theorem^ and a > 1/2. For any pair {A,B) of subsets of¥ p 
such that \A\ x \B\ x p a , we have 

-. , min{2a-l;2-2a} 

\F(A,B)\ > |^1| 1H — 1 — ^ 

The notion of expander which we discussed in the previous section is concerning the ability 
for a two variables function F, inducing a sequence (F p ) p , to provide a non trivial uniform 
lower bound for 

kJF) = inf liminf min f hl^E^l^)} . A,Bc¥„ and L lP a < \A\, \B\ < L 2 p a \ 
o<Li<l 2 p^oo L In \A\ J 

For F introduced in Theorem HI we thus have 

min{2a; — 1; 2 — 2a j 1 , 

1 + 1 ^ 1 < K a (F) < min{2, -}, 

2 a 

where the upper bound follows from the plain bounds \F(A, B) \ < \A\\B\ and \F(A, B)\ < p. 

To our knowledge, no explicit example of function F such that K a (F) = min{2, ^} has been 

already provided in the literature, even for a given real number a with < a < 1. This 

question is certainly much more difficult than the initial question of providing expander. 

This suggests the following definition: 

Definition. Let / C (0, 1) be a non empty interval. A family F = (F p ) p of two variables 
functions is called 

• a strong expander according to I if for any a G /, we have 

K a (F)=mm{2,±}. 
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• a complete expander according to I if for any a £ I, for any positive real numbers 
L\ < L 2 , there exists a constant c = c(F, L 1; L 2 ) such that for any prime number p 
and any pair (A, B) of subsets of ¥ p satisfying Lip a < \A\, \B\ < L 2 p a , we have 

\F P {A,B)\ > qT^, 

Complete expanders according to I are obviously strong expanders according to /. As 
indicated in [3], random mapping are strong expanders with a large probability, but no 
explicit example is known. Furthermore functions F introduced in Theorem H] could even- 
tually be strong expanders, but we can not prove or disprove this fact. Nevertheless, we 
can show that some of them are not complete expanders, in particular Bourgain's function 
F(x,y) = x 2 + xy = x(x + y). Indeed, let A and B be the interval [l,p a /2] in Z p . Then 
A U (A + B) C [l,p a ]. If we assume a < 1/2, the following result which is a direct conse- 
quence of a result by Erdos (see [3 E]) implies that F(A, B) = A ■ (A + B) has cardinality 
at most o(p 2a ). 

Lemma 6 (Erdos Lemma) . There exists a positive real number 5 such that the number of 
different integers ab where 1 < a,b < n is 0(n 2 /(Inn) 5 ). 

A sharper result due to G. Tenenbaum [8] implies that 5 can be taken equal to 1 — 1+ |^ n2 
in this statement. 

In the same vein, we can extend Bourgain's result to more general functions: 

Proposition 7. Let k > 2 be an integer, u G Z and F(x,y) = x 2k +ux k +x k y = x k (x k + y+u). 
Then for any a, < a < 1/2, F is not a complete expander according to {a}. 

Proof. Let L be a positive integer such that L < y/p/2. The set of fc-th powers in F* is 
a subgroup of F* with index I = gcd(fc,p — 1) < k. Thus there exists a e F* such that 
[1,L] contains at least L/l residue classes of the form ax k , x G F*. We let A = {x G 
F* : ax k G [1,L]}, which has cardinality at least L since each fc-th power has I k-th roots 
modulo p. We let B = {y G F p : a(y + u) G [1,L]}. We clearly have \B\ = L. Moreover 
the elements of F(A,B) are of the form x k (x k + y + u) with x G A and y G B, thus are 
of the form a' 2 x'y' where x',y' G [1,2L] and aa' = 1 in F p . By Erdos Lemma, we infer 
\F(A,B)\ = 0(L 2 /(\nL) 5 ) = o(L 2 ). □ 

By using a deep bound by Weil on exponential sums with polynomials, we may slightly 
extend this result: 

Proposition 8. Let f(x) and g(y) be non constant integral polynomials and F(x,y) = 
f(x)(f(x) + g {%)))■ Then F is not a complete expander according to {1/2}. 

We shall need the following result: 

Lemma 9. Let u G F p; L be a positive integer less than p/2 and f{x) be any integral 
polynomial of degree k > 1 (as element of¥ p [x]). Then the number N(I) of residues x G F p 
such that f(x) lies in the interval I = (u — L,u + L) of¥ p is at least L — (k — l)y/p. 

Proof. We will use the formalism of Fourier analysis. Recall the following notation and 
properties: 

Let 0, ip : F p — > C and x G ¥ p . 

• }(x) := EygFjXl/MfO' where e W := exp(2ivrt); 

• (f)* ip(x) = 0(x)^(x); 

• E„pf„ l^(l/)| 2 =pE«pf„ I0(l/)| 2 (Parseval's identity). 



6 



EXPLICIT CONSTRUCTIONS OF EXTRACTORS AND EXPANDERS 



Let J be the indicator function of the interval [0, L) of W p and let 

'hu\ 
V 

where the exponential sum 

■hf(x) 



T:=^J*J(h)S,(-^p)e[—) t 



P 

is known to satisfy the bound \Sf(h,p)\ < (k — l)y/p whenever h 7^ in ¥ p and p is an odd 
prime number (see for instance [2]). 
On the one hand, we have 

T = pj7j(0)+ J^J{h)S f {-h,p)e(— 

>pL 2 -k^ \J*~J(h)\ 
/ieF p \{o} 

> pL 2 - kLp 3/2 , 

by the bound for Gaussian sums and Parseval Identity. Hence 

(6) T > pL{L - ky/p) 

On the other hand, 

■h{ y + u) \ y> J _ hf(x 

p J ^— ' V p 



r=EEI]w(. + *(^)E.(-^) 

heWp y£W p z£¥ p 

h(y + u ~f( x ))' 



x&p j/GFp z&p 



x&p y£¥ p z&p he¥ p ^ 



where g?l(z) denotes the number of representations in ¥ p of z under the form j — j', < 
j,j' < L. Since obviously d^z) < L for each z G F p , we get 

T < pLN(I). 

Combining this bound and (EJ), we deduce the lemma. □ 

Proof of Propostion 0. We choose p large enough so that both f(x) and g(y) are not constant 
polynomials modulo p. Let L = k^Jp, and define A (resp. B) to be the set of the residue 
classes x (resp. y) such that f(x) (resp. g(y)) lies in the interval (0, 2L). By the previous 
lemma, one has \A\, \B\ > y/p. Moreover for any (x,y) G AxB,we have f(x) and f{x)+g(y) 
in the interval (0,4L). By Erdos Lemma, the number of residues modulo p which can be 
written as F(x,y) with (x,y) G A x B, is at most 0(L 2 /(ha.L) 5 ) = o(p), as p tends to 
infinity. □ 

5. A family of 3-source extractors with exponential distribution 

Let us fix the definition of the entropy of a fc-source / = (f p ) p where f p : ¥ p — > { — 1, 1} as 
follows : it is defined to be the infimum, denoted a , on a > such that for any subset Aj, 
j = 1, . . . , k, of F p with cardinality at least p a , we have 

k 

^2 fp(ai,---, a k)=o(Y[\A j \), asp->+oo. 

aj-eA, j=l 
7=1 k 
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When a < 1, / is called fc-source extractor (with entropy a ). 

The problem of finding fc-source extractors can be reduced as follows. We are asking the 
question to find functions F p : ¥ p — > F p such that for any fc-tuples (Ai, A 2 , ■ ■ ■ , A k ) of subsets 
of F p with cardinality x p a such that for any r G F* 

k 

(7) ■ e r (F p (xi, X2, ■ ■ ■ , Xk)) = 0(p~ 1 Y\ l^il); as p tends to infinity, 

ajGAj j=l 
j=l,...,k 

for some 7 = 7(a) and where we denote e r (u) = exp(— ). If (J7J) holds, Bourgain (cf. [I]) has 
shown that 

k 

(8) / p (ai, . . . ,o fe ) = 0(p~ 7 ' JJ asp^+cx) 

oj-e^j i=i 
j=i,...,fc 

for some 7' > where f p := sgnsin^^. It thus gives a fc-source extractor / = (f p ) p - An 
extractor / such that (jSJ) holds is said to have an exponential distribution. 

In [H Proposition 3.6], Bourgain proved that F(x,y) = xy + x 2 y 2 , by letting F = F p for 
any p, provides a 2-source extractor with exponential distribution and with entropy 1/2 — 5 
for some 5 > 0. We will show that this result can be extended in order to give 3-source 
extractors with such an entropy. It has to be mentioned that explicit 3-source extractors 
with arbitrary positive entropy exists, as shown in PQ, but these extractors do not yield an 
exponential distribution. Here our goal is to exhibit 3-source extractors with exponential 
distribution. 

Theorem 10. Let F(x,y, z) = a(z)xy + b(z)x 2 g(y) + h(y, z) G Z[x,y,z] where a(z), b(z) are 
any non zero polynomial function, g(y) is any polynomial function of degree at least two and 
h(y, z) an arbitrary polynomial function. Let Li < L 2 be positive real numbers, a G (0, 1) 
and A,B,C be subsets of ¥ p with cardinality satisfying Lip a < \A\,\B\,\C\ < L 2 p a . For 
r G F p; we denote 

S r = ^2 er(F(x,y, z)) . 

(x,y,z)eAxBxC 

Then there exists 7 = 7(a) > such that 

max \S r \ < p ((22-7/2)a+l)/8 
reF p x{0} 

where the implied constant depends only on F, L\ and L 2 . 

Proof. The proof starts as in [U Proposition 3.6]. For any r G F p \ {0}, let 

S r = ^2 e r(F(x,y, z)). 

(x,y,z)eAxBxC 

The first transformations consist in using repeatedly Cauchy-Schwarz inequality in order 
to increase the number of variables and to rely S r to the number of solutions of diophantine 
systems. We simply denote S r by S. We denote by Co the subset of C formed with the 
elements z G C such that a(z)b(z) = 0. We let C := C \ Co. Then S = So + S' where in 
Sq (resp. S') the summation over z is restricted z G Co (resp. z G C). Since the number of 
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roots of the equation a(z)b(z) = is finite, we have \S \ <C |^4||-B| <C p 2a . Moreover we get 
\ S '\ ^E|E e - Hz)xy + b(z)x 2 g(y)) 



y,z x 



1 /2 

-(E 1 ) {^2^{a{z){x l -x 2 )y + b{z){x\- 



1/2 



y.z 



y,z 

x 1 ,x 2 



where the summation over z is restricted to z G C". Hence 

|5"| 2 « P 2a E 1 E e - ( a ^)( Xi - + b ^ x " ~ x2 ^(y)) 



y,z x 1 ,x 2 
1/2 



^ ^ ( E ( E 6 ' r _ X 2 + ^3 - £4) 2/ + (^1 - ^2 + 



37 9 37, 



My)) 



1/2 



;(/,2 



21,22 
23,24 



then 



|5'| 4 < p 6a ^r(a(z)(x 1 -x 2 + x 3 - x 4 )y + b(z)(xj -xj + xj- xl)g{y)) 



X1,X2 
X 3 ,X4 

y,z 



By a new application of Cauchy-Schwarz inequality, we get 
|5"|8 < p i2a (J2\j2 er ( a ( z )( x i -x 2 + x 3 - x 4 )y + b(z)(x 2 1 - x\ + x\ - x\)g 



21,22 y 
23,24 



^ P 17a E E e r{a(z)(xi -x 2 + x 3 - x 4 )(yi - y 2 ) 



Z X1,X2 
2 3 ,2 4 

yi,V2 



+ b ( z )( x i -xl + x 2 3 - xl)(g(y 1 ) - g(y 2 ))) 

= p 17q E E KQ^M<^im + K^m) 

where //(£) is the number of quadruples (xi, x 2 , x 3 , x 4 ) G A 4 such that 

£i = X\ — x 2 + X3 — X4, 

(9) 



£ — 2 _ 2 _l_ 2 _ 2 
<^2 — X\ X 2 ~t~ X3 *^45 



and z/(t]) is the number of couples (2/1,2/2) G B 2 such that 

r ?7i = Vx ~ 2/2, 



[m = g(yi) -#(2/2)- 

Then clearly X^eF 2 K 7 /) 2 can be expressed as the number of quadruples (yi,y 2 ,y[,y' 2 ) G B 4 
such that 



(10) 



2/i-2/2 = 2/i- 2/ 2 > 

c/(2/i) - ^(2/2) = g{y'i) - g(y 2 )- 

If = y 2 in this system then yi = y 2 . Thus (jTOl) has exactly |5| 2 solutions of the type 
(2/1 > 2/2 , y[ , 2/i) • If 2/i an d 2/2 are fixed so that £ = y[ — y' 2 ^ 0, then we can write y\ = y 2 + t 
and and clearly g(y 2 + 1) — g{y 2 ) = g{y'i) — 2/(2/2) nas a ^ most deg g — 1 solutions y 2 (since 
degg > 2). We thus have 

,2a 



(11) 



"(v) 2 < 
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For any £ = (£1,^2) G F 2 , we denote by //i(£) (resp. /^(O) the number of solutions 
(xi, X2, Xs, X4) G A 4 of (jHJ) such that Xi = X2 (resp. Xi 7^ X2). Then 

^ Ml (£) 2 = L4| 2 x^, 
where N is the number of quadruples (2:3, X4, 2:3, 24) G A 4 such that 

X3 — X4 = £3 — ^4, 
2 _ 2 _ 2 _ 2 

^3 — x A — z 3 z 4 . 

By distinguishing solutions with and solutions with £3 7^ X4, we plainly obtain 

N < 2\A\ 2 . Hence 



(12) J2^&^p 4a - 



For any fixed i 6 A, we denote by //(£, t) the number of solutions of the form (xi, x%, t, X4) G 
A 4 with x\ 7^ X2 of the system (Q. Eliminating X4 by expressing it in terms of £1 using the 
first equation, we see that is the number of couples (xi,x 2 ) G A 2 with xi 7^ x 2 such 

that £ lies on the curve 

(13) £ 2 := £ 2 + £ 2 = 2(xj - x 2 + t)£i - (an - x 2 + tf + x 2 - x 2 + t 2 . 

Using the new variable £ 2 instead of £2, we get that each couple (xi,X2) G A 2 with x\ 7^ X2 
defines a line £ XI)W2 in the plane F 2 with equation 

(14) £ 2 = 2(xi - x 2 + t)£i - (xi - x 2 + t) 2 + x\ - x\ + t 2 . 

It is clear that two couples [x\^x%) G A 2 and (x'^x^) G A 2 with X\ 7^ X2 define the same 
line if and only if x\ — x<i = x[ — x' 2 and x 2 — x 2 = x^ 2 — x' 2 2 , that is (xi, X2) = (x[, x' 2 ). It 
follows that all the lines £ Xl ,x 2 with xi 7^ X2 are pairwise distinct and the number of these 
lines is equal to \A\ 2 — \A\ <C p 2a . We let C = {£ Xl ,x 2 '■ (^1,^2) G A 2 , x\ 7^ X2}. By applying 
Lemma [21 we get for some 7 = 7(a) > 

\{[{tuQ-A eC k xC: (£ x ,£ 2 ) e £}\ « \C k f 2 ^ + P ^ a . 

where C k is the set of couples (£1, £ 2 ) G F 2 such that the number of different couples (27, x 2 ) G 
A 2 with xi 7^ X2 satisfying equation fTl4|) with £1 — x% +X2 — t G A is at least fc. Since there is 
a one-to-one correspondance between the couples (£i,£ 2 ) G Cfc and the couples (£i,£2) G F 2 
such that /i(£, t) > fc, we plainly have \Ck\ < p 3a /k. Furthermore, for fixed (£1,^) m F 2 , 
each choice of x\ G A gives at most two different X2 G A such that (1 1 4jl holds. Hence C k is 
empty if k > 2\A\. We let c k = \C k \. We obtain 

c fc fc«cf- 7 +p (3 - 2 ^, 

giving either 

c fc A; < p( 3 ~ 2 ^ 

or 

* « cf" 7 . 

Since c k <C p 3a /k, the last bound is available only if 

k < fc(a,7) := qo (3 ~ 67)cl/(3 ~ 27) , for some constant c> 0. 

We have 

^/i(£,t) 2 = ^ A; 2 (c fc - c fc+ i) = (2fe-l)c fc> 

5eFg l<fc<2|A| l<fe<2|A| 
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by partial summation. It follows that 



^GF 2 , l<k<k(a,~y) k(a,j)<k<2\A\ 

< 2 e p 3a + E p (3 ~ 27)a 

l<k<k(a,y) k(a,y)<k<2\ A\ 

^ pl2(l- 7 )a/(3-2 7 ) + p (4-2 7 )a 

By Cauchy-Schwarz inequality, we get 

E ^(e) 2 = E ( E mc, *)) 2 < w E E ^ *) 2 ^ \ A \ 2 su p E »(i> ^ « 

giving with ( I12p 

(is) E Mi) 2 ^ 2 E Mi) 2 + 2 E ^(£) 2 « p (6 ' 7)cl - 

SeF2 ?eF 2 €eF 2 



-(6-7)" 

j 



This yields for MO 2 a sharper bound than that could be expected in general, namely 

0(j9 6a ). 

Returning to the estimation of 5", we obtain 

\S'\" « P 17a E E E K!Z)er(a(^)^i + 6(«)6i») 



zGC" gGF2 ^ gF 



« p"" E ( E MO 2 ) ( E | E "(sK (a(z)^vi + b(z)£ 2V2 ) 
zee geF 2 , ^gf2 »7gf2 

which is 

«^ 17a E (EMi) 2 ) 1/2 ( E K^K^E^W^^^-^^+^^fe-^))) 172 

zgC" ^gf2 r/.r/'eF 2 , |eF| 

by Cauchy-Schwarz inequality. For z G C", the summation over £ is p 2 if 77 = r/' and 
otherwise. It follows that 

i5'i 8 «^ +i |ci(EMi) 2 ) 1/2 (E^) 2 ) 1/2 - 

«eF2 r, S F2 

By (HI]) and ([15]), this yields 

|5"|8 ^ ^(22-7/2)^+1 

hence 

(16) \S\ < \S \ + « p((22-7/3)«+D/8. 

□ 

We may mention that in the statement of Theorem [101 7(a) is a continuous function of 
a. As a corollary, we have 

Corollary 11. Let F as in the theorem. Then the extractor defined by sgnsin 2 ^ has 
exponential distribution and entropy at most 1/2 — 5, for some 5 > 0. 



2\ 1/2 
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Proof. From Theorem [TDl we obtain that 

max \S r \ <^ p 3a - t(a) , 

reF p \{0} 

where 

(17) £(a) = ^2 + 7(a) 1 



2 a, 

Since 7(1/2) > 0, we have e(l/2) > 0, thus by continuity, there exists 5 > such that for 
a > 1/2 — 5, we have e(a) > 0. 

The rest of the proof follows that in [I], namely we have 

yj sgnsin ( 2 ^-> ) = g cA + o(p— >, 

where the coefficients c r satisfy 



. /2ttA ^4 /2i7Tt\ /l 

sgn sin — / c r exp + C - 

\P/ ^ \ P J V P 



and 



This gives 



p-i 



|c r | = O(lnp). 



r=l 



^ sgnsin ^ ggj^M ^ = 0((lnp)p 3-n 



(x,y,z)&AxBxC 

and the corollary follows. □ 

6. Concluding remarks 

1. As indicated in sectional no function of the type F(x, y) = f{x)+g(y) or any translated 
of it is an expander. Indeed let I be an interval with length x Cp a , (0 < a < 1, C > 0). By 
the averaging argument there are a and b in ¥ p such that 

\{a + I}n{f(x):xeW p }\>C'p a , 

and 

\{b + I}n{g(y):ye¥ p }\>CY, 

where C depends only on C and the degree of / and g. Now let A be the inverse image of 
{a + 1} fl {/(#) : x G F p } and let B be the inverse image of {b + J} D {<?(y) : y G F p }. Then 
the set B) of all elements of the form F(x, y), (x,y) G Ax B is contained in a + b + 21, 
hence the cardinality of F(A, B) is at most a constant times the cardinality of A and B. 
A similar argument yields that no map of the kind f(x)g(y) + c is an expander. 

2. As quoted after Corollary [Til the functions f p (x,y) = sgn sin F p (a;, y) give a 2-source 
extractor with entropy less than 1/2, if we let F p (x, y) = xy + x 2 y 2 or F p (x, y) = xy + g p +y , 
where g p is any generator in F p . From the proof one can easily read that the functions 

(18) xy + x 2 h(y); xh(y) + x 2 y; xy + x 2 g v p ] xg y p + x 2 y 

(h is any non-constant polynomial) induce also 2-source extractors with entropy less than 
1/2 (see also remark 4 below). 

3. It is worth mentioning that for points and lines in F 2 , the bound given by the effective 
version of the Szemeredi- Trotter theorem of [9] is weaker then the trivial one in case where 
the number of lines and points is less than p. For this reason, it is seemingly not efficient 
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for providing an effective entropy less than 1/2 for /c-source extractor, contrarily to Bourgain- 
Katz-Tao result which holds for p e < N < p 2 ~ £ . 

4. Extractors are related to additive questions in ¥ p . In [7] Sarkozy investigated the 
following problem: let A, B, C, D C ¥ p be non-empty sets. Then the equation 

a + b = cd 

is solvable in a G A,b G B,c G C,d G D provided |A||S||C||D| > p 3 . This simple equation 
has many interesting consequences. One can ask the more general question of investigating 
the solvability of 

(19) a + b = F(c,d) 

where F(x, y) is a two variables polynomial with integer coefficients. Clearly the question is 
really interesting when we assume that \C\, \D\ < s Fp. 

Let us say that F(x,y) is an essential polynomial if (under the condition \C\, \D\ < y/p) 
\A\\B\ > p 2 implies the solvability of (!T9~]). So by the Sarkozy's result F(x,y) = xy is an 
essential polynomial. From the proofs of propositions 3.6 and 3.7 of [3], it can be deduced 
that there exist 5 > and e > such that for any r G ¥ p \ {0} and for any C, D C F p with 

|C|,|Z>|>P 1 ' 2 -', 

(20) | Y, er{F p {c,d))\ = 0{\C\\D\p-*), 

cec,deD 

where F = (F p ) p is any one of the following families of functions: 

- F p (x,y) = x 1+u y + x 2 ~ u h(y) for any p, where we fix u G {0, 1} and any non constant 
polynomial h(y) G Z[y]. 

- F p (x, y) = x 1+u y + x 2 ~ u g y p for any p where g p generates and u G {0, 1} is fixed. 
This yields the following result: 

Proposition 12. Let (F p ) p be one of the two families of functions defined above. There exist 
real numbers < 5, 5' < 1 such that for any p and for any sets A, B,C,D C ¥ p fulfilling the 
conditions 

\C\>p^ 2 - 5 , \D\>p 1 ' 2 - s \A\\B\ > p 2 - 6 ' , 
there exist a G A,b G B,c G C,d G D solving the equation 

(21) a + b = F p {c,d). 

Sketch of the proof. Let iV be the number of solutions of (1211) . Then by following Sarkozy's 
argument and using the bound ([211]) . we obtain 



N- 



\A\\B\\C\\D\ 



« lA^-lB^lCWDlp- 



V 

which gives the result for p large enough with 5' = e. For p < po, it suffices to reduce 8' in 
order to have also p 2 ^ 5 > p^ — 1, and the result becomes trivial since |^4||-B| > p 2 ~ 5 ' implies 
either A = ¥ p or B = ¥ p . D 



5. Note that the range of our function F(x, y, z) = a(z)xy + b(z)x 2 g(y) + h(y, z) studied 
in section O is well-spaced i.e. the set F(A, B, C) of elements of ¥ p of the form F(x,y,z) 
where (x,y,z) £ Ax B x C, intersects every not too long interval, provided the cardinalities 
of the sets are x p a with a > 1/2 — 5. 

The bound we obtain for the exponential sum S in the proof of theorem [10] yields the 
following result: 
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Corollary 13. Let e(a) given by ffTTl) and 5 given in CorollaruUli Let Li < L 2 be arbitrary 
positive real numbers, F(x,y,z) € Zi[x,y,z] as in theorem UU and A,B,C be subsets of¥ p 
with Lip a < \A\,\B\,\C\ < L 2 p a where a > 1/2 — 5. Then F(A, B,C) intersects every 
interval [u + l,u + L] in ¥ p provided L ^> p 1-e ( a ) where the implied constant depends only 
on F , Li and L 2 . 

For seek of completeness we include the proof. 

Proof. Let S(w) be the number of triples (a, b, c) G F(A, B, C) such that w = F(a, b, c). Let 
I = [1, L/2] and denote by I(w) its indicator. Then F(A, B,C)n[u + l,u+ L] is not empty 
if and only if the real sum 



T = J2S{w-u)I*I{-w) 



is not zero. Denote the Fourier transform of the indicators of S resp. I by S r resp. I r . By 
the Fourier inversion formula we have 



-Y,Sj?e r (-u) > ^ ~-J2\S r \\I r \ 2 = -\A\\B\\C\ll - \S r \\Ir\ 2 . 



T = 

p ' p p ' " p " p 



By the triangle inequality, the non trivial upper bound for \S r \ when r ^ and by the 
Parseval formula, (fTE|) and (IT7|) we get 



T- -\A\\B\\C\ll 



< - \ S A\I?\ < - max \S r \ l J r I < p 3 °" e(Q) /o- 



P 

Hence the set F(A, B, C) fl [u + 1, u + L] is not empty if 

-\A\\B\\C\I >j9 3Q - e(Q) 
P 

or equivalently if 

as asserted. □ 
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